/**
 * SmartyMeet Dev03 API REST
 * No description provided (generated by Openapi Generator https://github.com/openapitools/openapi-generator)
 *
 * The version of the OpenAPI document: 1.0.1
 * Contact: developer@smartymeet.com
 *
 * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
 * https://openapi-generator.tech
 * Do not edit the class manually.
 */
import type { TenantSsoAttributesSchemaDomainsInner } from './TenantSsoAttributesSchemaDomainsInner';
/**
 * Enterprise SSO configuration. READ-ONLY here: the generic tenant PATCH strips this key, the only writers are the /v1/tenants/{tenantId}/sso doors. Sending it in a PATCH is ignored (not an error).
 * @export
 * @interface TenantAttributesSettingsSchemaSso
 */
export interface TenantAttributesSettingsSchemaSso {
    /**
     * Whether enterprise SSO is provisioned for this tenant
     * @type {boolean}
     * @memberof TenantAttributesSettingsSchemaSso
     */
    enabled?: boolean;
    /**
     * Identity provider family behind the tenant's IdP
     * @type {TenantAttributesSettingsSchemaSsoProviderEnum}
     * @memberof TenantAttributesSettingsSchemaSso
     */
    provider?: TenantAttributesSettingsSchemaSsoProviderEnum;
    /**
     * GUID of the customer's Entra tenant. One Cognito IdP serves exactly one Entra tenant: Cognito compares the token iss to a single configured issuer, and Entra mints iss per tenant, so a multi-tenant issuer can never match.
     * @type {string}
     * @memberof TenantAttributesSettingsSchemaSso
     */
    entraTenantId?: string;
    /**
     * Name of the Cognito identity provider, ms-{shortCode}. Carries the tenant, which is how the auth triggers resolve it without scanning.
     * @type {string}
     * @memberof TenantAttributesSettingsSchemaSso
     */
    idpName?: string;
    /**
     * Email domains of the customer. A domain gates JIT and auto-link ONLY once it carries verifiedAt - uniqueness in the claim registry is not proof of ownership.
     * @type {Array<TenantSsoAttributesSchemaDomainsInner>}
     * @memberof TenantAttributesSettingsSchemaSso
     */
    domains?: Array<TenantSsoAttributesSchemaDomainsInner>;
    /**
     * Role granted when a pending JIT user is APPROVED - never granted by the act of signing in. Domain-gated JIT makes the whole customer workforce eligible, so an automatic operational role would expose candidate data to anyone who can authenticate at the customer's IdP.
     * @type {string}
     * @memberof TenantAttributesSettingsSchemaSso
     */
    defaultRole?: string;
    /**
     * When true, password login is refused for this tenant's users. Owner and sysowner are always exempt - a break-glass account, because an outage in the customer's Entra must not lock them out of the product.
     * @type {boolean}
     * @memberof TenantAttributesSettingsSchemaSso
     */
    required?: boolean;
    /**
     * When true, a JIT user is activated immediately with defaultRole instead of landing in a pending state. Off by default.
     * @type {boolean}
     * @memberof TenantAttributesSettingsSchemaSso
     */
    autoApprove?: boolean;
}
/**
 * @export
 */
export declare const TenantAttributesSettingsSchemaSsoProviderEnum: {
    readonly Microsoft: "microsoft";
};
export type TenantAttributesSettingsSchemaSsoProviderEnum = typeof TenantAttributesSettingsSchemaSsoProviderEnum[keyof typeof TenantAttributesSettingsSchemaSsoProviderEnum];
/**
 * Check if a given object implements the TenantAttributesSettingsSchemaSso interface.
 */
export declare function instanceOfTenantAttributesSettingsSchemaSso(value: object): value is TenantAttributesSettingsSchemaSso;
export declare function TenantAttributesSettingsSchemaSsoFromJSON(json: any): TenantAttributesSettingsSchemaSso;
export declare function TenantAttributesSettingsSchemaSsoFromJSONTyped(json: any, ignoreDiscriminator: boolean): TenantAttributesSettingsSchemaSso;
export declare function TenantAttributesSettingsSchemaSsoToJSON(json: any): TenantAttributesSettingsSchemaSso;
export declare function TenantAttributesSettingsSchemaSsoToJSONTyped(value?: TenantAttributesSettingsSchemaSso | null, ignoreDiscriminator?: boolean): any;
//# sourceMappingURL=TenantAttributesSettingsSchemaSso.d.ts.map